[Q58-Q81] Tested Material Used To Google-Workspace-Administrator Test Engine Exam Questions in here [Feb-2023]

Rate this post

Tested Material Used To Google-Workspace-Administrator Test Engine Exam Questions in here [Feb-2023]

Penetration testers simulate Google-Workspace-Administrator exam PDF

Google Google-Workspace-Administrator Exam Syllabus Topics:

Topic	Details
Topic 1	Troubleshoot workspace access and performance Classify and mitigate basic email attacks
Topic 2	Collect log files or reports needed to engage with support Troubleshoot user reports of mail delivery problems
Topic 3	Describe how to import and export data Use Vault to assist legal teams. Considerations
Topic 4	Configure and implement data governance policies Removing connected applications and sites
Topic 5	Designing security integration and addressing objections Scanning email with Data Loss Prevention (DLP)
Topic 6	Manage user lifecycles with provisioning and deprovisioning processes Implications of current Google Workspace APIs to development efforts
Topic 7	Configuring security and data region Managing content compliance rules Configuring phishing settings
Topic 8	Transferring user data from one user to another Creating administrative roles Using Apps Script to automate tasks

Q58. Your business partner requests that a new custom cloud application be set up to log in without having separate credentials.
What is your business partner required to provide in order to proceed?

Service provider logout URL

Service provider ACS URL

Identity Provider URL

Service provider certificate

Q59. The executive team for your company has an extended retention policy of two years in place so that they have access to email for a longer period of time. Your COO has found this useful in the past but when they went to find an email from last year to prove details of a contract in dispute, they were unable to find it. itis no longer in the Trash. They have requested that you recover it.
What should you do?

Using Vault, perform a search for the email and export the content to a standard format to provide for investigation.

Using the Message ID, contact Google Google Workspace support to recover the email, then import with Google Workspace Migration for Microsoft Outlook.

Using the Vault Audit log, perform a search for the email, export the results. then import with Google Workspace Migration for Microsoft Outlook.

Q60. The credentials of several individuals within your organization have recently been stolen. Using the Google Workspace login logs, you have determined that in several cases, the stolen credentials have been used in countries other than the ones your organization works in. What else can you do to increase your organization’s defense-in-depth strategy?

Implement an IP block on the malicious user’s IPs under Security Settings in the Admin Console.

Use Context-Aware Access to deny access to Google services from geo locations other than the ones your organization operates in.

Enforce higher complexity passwords by rolling it out to the affected users.

Use Mobile device management geo-fencing to prevent malicious actors from using these stolen credentials.

Q61. How can you monitor increases in user reported Spam as identified by Google?

Review post-delivery activity in the Email logs.

Review user-reported spam in the Investigation Tool.

Review spike in user-reported spam in the Alert center.

Review post-delivery activity in the BigQuery Export.

Q62. A user is reporting that after they sign in to Gmail, their labels are not loading and buttons are not responsive. What action should you take to troubleshoot this issue with the user?

Collect full message headers for examination.

Check whether the issue occurs when the user authenticates on a different device or a new incognito window.

Check whether a ping test to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.

Check whether traceroute to service.gmail.com (pop.gmail.com or imap.gmail.com) is successful.

Q63. The company’s ten most senior executives are to have their offices outfitted with dedicated, standardized video conference cameras, microphones, and screens. The goal is to reduce the amount of technical support they require due to frequent, habitual switching between various mobile and PC devices throughout their busy days. You must ensure that it is easier for the executives to join Meet video conferences with the dedicated equipment instead of whatever device they happen to have available.
What should you do?

Set up unmanaged Chromeboxes and set the executives’ homepage to meet.google.com via Chrome settings.

Set up the executive offices as reservable Calendar Resources, deploy Hangouts Meet Hardware Kits, and associate the Meet hardware with the room calendars.

Deploy Hangouts Meet Hardware Kits to each executive office, and associate the Meet hardware with the executives’ calendars.

Provision managed Chromeboxes and set the executives’ Chrome homepage to meet. google.com via device policy.

Q64. Your IT team is being asked to fulfill a query by your organization’s legal department that requires an MBOX file that will be shared to a third-party partner for eDiscovery. The query must be run on multiple users. Legal has no admin rights to Google Vault. What should you do to fulfil the request?

Create a Google Vault matter for each user account, and share the matters to the legal admin.

Create a Google Vault matter, search for data, and run an export for the legal department.

Use the Investigation Too! to search for the data requested, and export for the legal department.

Search for the data in Gmail, and export for the legal department.

Q65. The CFO just informed you that one of their team members wire-transferred money to the wrong account because they received an email that appeared to be from the CFO. The CFO has provided a list of all users that may be responsible for sending wire transfers. The CFO also provided a list of banks the company sends wire transfers to. There are no external users that should be requesting wire transfers. The CFO is working with the bank to resolve the issue and needs your help to ensure that this does not happen again.
What two actions should you take? (Choose two.)

Configure objectionable content to reject messages with the words “wire transfer.”

Verify that DMARC, DKIM, and SPF records are configured correctly for your domain.

Create a rule requiring secure transport for all messages regarding wire transfers.

Add the sender of the wire transfer email to the blocked senders list.

Enable all admin settings in Gmail’s safety > spoofing and authentication.

Q66. Your company is deploying Chrome devices. You want to make sure the machine assigned to the employee can only be signed in to by that employee and no one else.
What two things should you do? (Choose two.)

Disable Guest Mode and Public Sessions.

Enable a Device Policy of Sign In Screen and add the employee email address.

Enroll a 2-Factor hardware key on the device using the employee email address.

Enable a User Policy of Multiple Sign In Access and add just the employee email address.

Enable a Device Policy of Restrict Sign In to List of Users, and add the employee email address.

Q67. A user is reporting that external, inbound messages from known senders are repeatedly being incorrectly classified as spam. What steps should the admin take to prevent this behavior in the future?

Modify the SPF record for your internal domain to include the IPs of the external user’s mail servers.

Update the spam settings in the Admin Console to be less aggressive.

Add the sender’s domain to an allowlist via approved senders in the Admin Console.

Instruct the user to add the senders to their contacts.

Q68. Your client is a multinational company with a single email domain. The client has compliance requirements and policies that vary by country. You need to configure the environment so that each country has their own administrator and no administrator can manage another country.
What should you do?

Establish a new Google Workspace tenant with their own admin for each region.

Create an OU for each country. Create an admin role and assign an admin with that role per OU.

Create Admin Alerts, and use the Security Center to audit whether admins manage countries other than their own.

Create a Team Drive per OU, and allow only country-specific administration of each folder.

Q69. Your organization is part of a highly regulated industry with a very high turnover. In order to recycle licenses for new employees and comply with data retention regulations, it has been determined that certain Google Workspace data should be stored in a separate backup environment.
How should you store data for this situation?

Use routing rules to dual-deliver mail to an on-premises SMTP server and Google Workspace.

Write a script and use Google Workspace APIs to access and download user data.

Use a third-party tool to configure secure backup of Google Workspace data.

Train users to use Google Takeout and store their archives locally.

Q70. On which two platforms can you push WiFi connection information with Google Workspace? (Choose two.)

Mac OS

Windows

Chrome OS

iOS

Linux

Q71. Your company recently decided to use a cloud-based ticketing system for your customer care needs. You are tasked with rerouting email coming into your customer care address, [email protected] to the cloud platform’s email address, [email protected]. As a security measure, you have mail forwarding disabled at the domain level.
What should you do?

Create a mail contact in the Google Workspace directory that has an email address of your- [email protected]

Create a rule to forward mail in the [email protected] mailbox to your- [email protected]

Create a recipient map in the Google Workspace Admin console that maps [email protected] to [email protected]

Create a content compliance rule in the Google Workspace Admin console to change route to your- [email protected]

Q72. Your organization’s information security team has asked you to determine and remediate if a user ([email protected]) has shared any sensitive documents outside of your organization. How would you audit access to documents that the user shared inappropriately?

Open Security Investigation Tool-> Drive Log Events. Add two conditions: Visibility Is External, and Actor Is [email protected].

Have the super administrator use the Security API to audit Drive access.

As a super administrator, change the access on externally shared Drive files manually under [email protected].

Open Security Dashboard-> File Exposure Report-> Export to Sheet, and filter for [email protected].

Q73. Your company has received help desk calls from users about a new interface in Gmail that they had not seen before. They determined that it was a new feature that Google released recently. In the future, you’ll need time to review the new features so you can properly train employees before they see changes.
What action should you take?

Company Profile > Profile > New User Features > Enable “Scheduled Release”

Apps > Google Workspace > Gmail > Uncheck “Enable Gmail Labs for my users”

Company Profile > Profile > New User Features > Enable “Rapid Release”

Device Management > Chrome > Device Settings > Stop auto-updates

Q74. You have configured your Google Workspace account on the scheduled release track to provide additional time to prepare for new product releases and determine how they will impact your users. There are some new features on the latest roadmap that your director needs you to test as soon as they become generally available without changing the release track for the entire organization.
What should you do?

Create a new OU and tum on the rapid release track just for this OU.

Create a new Google Group with test users and enable the rapid release track.

Establish a separate Dev environment, and set it to rapid release.

Ask Google for a demo account with beta access to the new features.

Q75. Your employer, a media and entertainment company, wants to provision Google Workspace Enterprise accounts on your domain for several world-famous celebrities. Leadership is concerned with ensuring that these VIPs are afforded a high degree of privacy. Only a small group of senior employees must be able to look up contact information and initiate collaboration with the VIPs using Google Workspace services such as Docs, Chat, and Calendar.
You are responsible for configuring to meet these requirements. What should you do?

In the Users list, find the VIPs and turn off the User setting “Directory Sharing.”

Create a Group for the VIPs and their handlers, and set the Group Access Level to Restricted.

In Directory Settings, disable Contact Sharing.

Create separate Custom Directories for the VIPs and regular employees.

Q76. The CEO of your company has indicated that messages from trusted contacts are being delivered to spam, and it is significantly affecting their work. The messages from these contacts have not always been classified as spam. Additionally, you recently configured SPF, DKIM, and DMARC for your domain. You have been tasked with troubleshooting the issue.
What two actions should you take? (Choose two.)

Obtain the message header and analyze using Google Workspace Toolbox.

Review the contents of the messages in Google Vault.

Set up a Gmail routing rule to whitelist the sender.

Conduct an Email log search to trace the message route.

Validate that your domain is not on the Spamhaus blacklist.

Q77. As a team manager, you need to create a vacation calendar that your team members can use to share their time off. You want to use the calendar to visualize online status for team members, especially if multiple individuals are on vacation What should you do to create this calendar?

Request the creation of a calendar resource, configure the calendar to “Auto-accept invitations that do not conflict,” and give your team “See all event details” access.

Create a secondary calendar under your account, and give your team “Make changes to events” access.

Request the creation of a calendar resource, configure the calendar to “Automatically add all invitations to this calendar,” and give your team “See only free/busy” access.

Create a secondary calendar under your account, and give your team “See only free/busy” access

Q78. Your marketing department needs an easy way for users to share items more appropriately. They want to easily link-share Drive files within the marketing department, without sharing them with your entire company. What should you do to fulfil this request? (Choose two.)

Create a shared drive that’s shared internally organization-wide.

Update Drive sharing for the marketing department to restrict to internal.

Create a shared drive for internal marketing use.

Update the link sharing default to the marketing team when creating a document.

In the admin panel Drive settings, create a target audience that has all of marketing as members.

Q79. Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of Sales
& Marketing has urgently requested access to a new Marketplace app that has not previously been vetted. The company’s Information Security policy empowers you, as a Google Workspace admin, to grant provisional access immediately if all of the following conditions are met:
Access to the app is restricted to specific individuals by request only.
The app does not have the ability to read or manage emails.
Immediate notice is given to the Infosec team, followed by the submission of a security risk analysis report within 14 days.
Which actions should you take first to ensure that you are compliant with Infosec policy?

Move the Senior VP to a sub-OU before enabling Marketplace Settings > “Allow Users to Install Any App from Google Workspace Marketplace.”

Confirm that the Senior VP’s OU has the following Gmail setting disabled before whitelisting the app: “Let users delegate access to their mailbox.”

Add the Marketplace app, then review the authorized scopes in Security > Manage API client access.

Search the Google Workspace support forum for feedback about the app to include in the risk analysis report.

Q80. Your organization syncs directory data from Active Directory to Google Workspace via Google Cloud Directory Sync. Users and Groups are updated from Active Directory on an hourly basis. A user’s last name and primary email address have to be changed. You need to update the user’s data.
What two actions should you take? (Choose two.)

Add the user’s old email address to their account in the Google Workspace Admin panel.

Change the user’s primary email address in the Google Workspace Admin panel.

Change the user’s last name in the Google Workspace Admin panel.

Change the user’s primary email in Active Directory.

Change the user’s last name in Active Directory.

Q81. Your Finance team has to share quarterly financial reports in Sheets with an external auditor. The external company is not a Workspace customer and allows employees to access public sites such as Gmail and Facebook. How can you provide the ability to securely share content to collaborators that do not have a Google Workspace or consumer (Gmail) account?

Allow external sharing with the auditor using the ‘Trusted Domains’ feature.

Enable the ‘Visitor Sharing’ feature, and demonstrate it to the Finance team.

Use the ‘Publish’ feature in the Sheets editor to share the contents externally.

Attach the Sheet file to an email message, and send to the external auditor.